i went ahead and installed kb4499175 (win7), kb4499165 (win8.1) and kb4505050 (ie11). i skipped kb4498206 so i hope kb4505050 is cumulative so i don’t need the other one.

on windows 7 i had pciclearstalecache in same folder as kb4499175 but i did not encounter any command window popping up. did something go wrong? how can i verify if pciclearstalecache has been installed correctly?

afterwards i installed all checked important updates for office 2010, .net, msrt on both computers and windows defender, flash (win8.1), as usual.

If your time zone is 6 hours different than EST here in the US I’d say yes as mine is time stamped exactly 6 hours earlier at 10:44 PM.

Glad you found the post by the way, I’ve never encountered adding a link to a particular post and having the post info get cut off before. And I tried editing and re-adding the entire link to the post twice thinking I somehow screwed up a simple copy/paste process!

Honx wasn’t having the problem… that was me. I copied the post link directly from the browser’s address bar and pasted it directly into the reply text box. Even if there were a space before the last part… the beginning “www.askwoody” part should have shown instead of the Title of the thread.

FWIW… after the first failure I verified the link I’d posted was legitimate by pasting it into a new Tab in my browser and it opened right where it should have. I tried adding the link to the reply a second time and got the same result… the TITLE of the thread is all that shows in my reply.

1 user thanked author for this post.

Does anyone with Windows Xp with paid support have issues with the updates and Internet Explorer 11? IE 11 seems to crashed with the current updates for May 2019 released for Windows Xp. We reached out to MS support but our support period ends in 2 days and 17 hours and no one has replied in a couple days so far. Our IT manager thinks they are just waiting for the time to run out or force us to pay for another 5 years support period to get help with this. I figure I asked here to see if anyone else is having the same issues.

1 user thanked author for this post.

It does work with Windows XP Pro with MS extended support. MS released a modified version of IE11 for all extend support users for government and businesses. This is why I am trying to figure out if it is the May 2019 updates or may be earlier updates in April 2019, March 2019, etc that is causing the issues.

1 user thanked author for this post.

MS has time updates that disable if you are near the end of payment schedule to force you to update. I heard this from a few people that have Windows Xp Pro support. That might be your only option. Most often once you pay they will help you quickly to resolve the issue. We still have 1 year left for extend support and our Windows XP with IE11 works fine. After that, we will have to renew for another 5 years.

Our IT manager thinks they are just waiting for the time to run out or force us to pay for another 5 years support period to get help with this.

Your manager is right. MS is doing this with everyone. I can bet all that I have that once you pay up MS will give you the fix. MS knows that many companies can not move to new OS and XP is their big money maker with extended support. Our business renewed our support for around $100M ($20M for each year).

You do not have to reboot between these:
KB4499167 2019-05 Cumulative Update
KB4497932 Update for Adobe Flash Player
.NET Update
If you deal with any organization that ends in gov.uk, you will need KB4505064 (otherwise, you do not need this)

1 user thanked author for this post.

In a post I made under another Topic, you advised that Windows 10 Updater will automatically provide the updates you need, and the Servicing Stacks will come with the Monthly CU, and Windows will take care of the installation order.

Also I inquired why on my 1803 Pro, I did not receive the separate .NET update KB4495616?
No reply from anyone yet. In the Monday’s Newsletter Susan advised OK to install if you received one. Do some receive and others don’t? Should I procure from the MS Catalog?

In a post I made under another Topic, you advised that Windows 10 Updater will automatically provide the updates you need, and the Servicing Stacks will come with the Monthly CU, and Windows will take care of the installation order.

If you read the post you will find that the user specifies a MANUAL install,, not a Windows Update install which you are quoting about.

No reply from anyone yet. In the Monday’s Newsletter Susan advised OK to install if you received one. Do some receive and others don’t? Should I procure from the MS Catalog?

You are talking about two different things here.
If you install from Windows Update, you should install whatever .NET (and other patches) you are offered b/c it will be what you need.
Susan’s Master Patch List is for a business environment, where IT knows what to do and when to do it. If you have to ask, you are not in that group and should not be using the Update Catalog.

1 user thanked author for this post.

I am planning to install these 1803 Home version updates tomorrow. But a different question came to mind as I reviewed your answer (which I greatly appreciate) and the update catalog.

Which specific .NET update do I need to install? I used Registry Editor to check which .NET version I am running. RegEd shows a DWORD value of 461808, which corresponds to .NET version 4.7.2.

KB4495616 is the only .NET update that comes up as an 1803 update in the catalog, but it specifically says it is for .NET version 4.8. KB4495590 includes .NET version 4.7.2 but says it is for Windows 10 1809, not 1803.

I don’t want to install the wrong update and break something on my machine. And I don’t recall if either of these updates were pushed my way while I was blocking everything. Unless I can get absolute certainty as to which update I need, I doubt I’ll be installing either one.

If you install the .NET update through Windows Update, you do not have to worry about which update to install. Windows Update will determine which one(s) you need and install them accordingly. So, if you have hidden any, unhide it/them and let WU decide what to install.

“I strongly advise against installing Win10 1903 at this point. It ain’t baked.” Sorry Woody, but I already installed it. That being said, I recently finished upgrading all my computers from Windows 7 and 8.1 to 10. And since 1903 was the latest version, I figured why not. I haven’t had any issues aside from one game not working, but I got it working after reinstalling it and DirectX 9.

On an interesting note, I was able to use the Windows 10 Media Creation Tool and upgrade, and the activations carried over. I’m not sure if that was supposed to work, but it did. Despite the free Windows 10 upgrade ending years ago.

Sorry for re-posting, but I wasn’t signed in the first time. That anonymous post just previous was me.

I’ve been having problems accessing pkcano’s page with all the links for Group B updaters. When I go to the page all the type is greyed out and the links are non-functional. I’ve tried using Firefox on both the MacOS and under Win7, disabling all tracking blockers and allowing all scripts. Same deal with Safari on the Mac, which has no add-ons or other security/privacy protection.

The fact that I get the same thing under both the MacOS and Win7 suggest that it’s a problem with the page…?

1 user thanked author for this post.

Hi PKC, We hope you get the page corrected sometime. For those having a hard time seeing the text, like me, hold your left mouse button down and drag over it as if you are going to copy it. You can then see the text. This also works on white on white some people do to hide things.

One can also reset the font display in their browser, but that is a hassle.

I have Windows 7 and am in Group B. Three of the May 2019 updates that PKCano has listed in AKB2000003 are repeats of what we already installed when Woody gave the DEFCON 3 clearance back on May 15, 2019, namely KB4499175, pciclearstatecache, and KB4498206. Do we need to install those three updates again if we already installed them back in May?

2 users thanked author for this post.

Thanks for your response. I realize that you usually hold off installing the monthly updates until Woody raises the DEFCON number to at least 3. But for people who have Windows 7 or XP, Woody raised it to at least 3 on two occasions, once on May 15th and then again on June 4th , and so that’s why I asked. Thanks again for your response.

“All of the complaints I hear are from those ‘seekers’ who went to the download site and installed 1903 with malice and forethought. A triumph of hope over experience.”

I literally went through multiple LOL cycles on reading that.

Of course, my reaction might have been different had I wandered into that trap myself!

The second sentence is often applied to subsequent marriages. That’s why for me, it was one and done, I didn’t wander into that trap either. How I managed to muster the requisite sense at 30 I haven’t a clue. But 40 years later, I know it was exactly the right strategy.

2 users thanked author for this post.

NorthwestRick, Hear! Hear! A nice comment. I too feel Woody has some very artistic and knowledgeable writhing phrases. I feel many need to know history or old movies(??) to understand some of his lines. I love them.

Woody, if you have not done it, I am waiting to hear about a bad patch month and people will experiance ….. “the gnashing of teeth”.

For Win 7 x64 is KB4054530 (.NET 4.7.2) safe to install? I leave it checked every month ever since it came out in 07/2018. Some months ago a friend installed it on a laptop and she lost all internet connectivity so I uninstalled it for her. I haven’t installed it on any of my Win 7 machines. Is there any need to upgrade to 4.7.2? I have 4.6.1.

3 users thanked author for this post.

Redknight, From what I have read, the newer .Nets have more telemetry. Like PKC said unless you need 4.7.2 don’t get it. For that matter do you need 4.6.1? You may, because of MS Office. .NET 3.5.1 comes with Windows 7, so for me I only update 3.5.1 and use the Security Only version when it is available for that patch month.

If you get the .NET updates through WU or better still the Security Only -for each of your installed versions- you are more secure.

I suggest people research if the .NETs they have over 3.5.1 for Windows 7, are actually needed. Like some programs on your computer, you may not even need them if you do not have a program that requires it. If not, then uninstall them. You will close a point of entry to your computer.

For those interested in .NETs, Arron Stebner has a verification or cleanup tool. You can use it to see which version you have.

Arron does keep it updated. The cleanup tool is a last ditch uninstall if all else fails.

To even begin to answer that question, we would have to have the hardware specs of your computer, what your other settings are (assuming Pro version since you have deferrals), and information about the other software you are running, especially the AntiVirus

No problems so far. Unless another urgent security problem appears, I probably will not patch my systems again for a few months, having decided some time ago that it is only necessary to patch once every 4-6 months.

This struck me as odd as I knew that Windows Server 2012 (non R2) never received an Internet Explorer 11 version.

I was quite shocked upon Googling 2012 and IE11, I found an article from Microsoft that very quietly announced that as of April 2019, Microsoft WAS indeed putting out a new Internet Explorer 11 edition to work on Windows 2012. At the same time, they quietly mentioned that support for the IE10 version would end sometime this year.

If this has been mentioned before, sorry, but I think this actually is worth highlighting.

We are stuck with Windows 2012 Datacenter, because our version of VMware ESXI came with that specific version licence at the time.

The worry is that there is probably a very small installation base, so getting timely reports of bad/buggy updates will be difficult.

This might warrant a self-contained post, as I could not even find any reports in tech media about this (other than a single article from January on Ghacks, but that was three months before the browser was actually released).

1 user thanked author for this post.

1. Pause Updates: I have this “on” currently. When I flip the switch to “off”, WU will start checking-downloading whatever is available, however, as I have Quality Updates deferred for 30 days, I, presumably, won’t get KB4494441 (for another 30 days).

If so, should I download and install KB4494441 (or KB4497934) manually? I don’t want to change deferral to “0” as I don’t know what happens with the WU settings afterwards (like greying out deferral change possibilities).

2. WU Settings UI after updates: any hints what to expect? Are there major changes coming already with KB4494441, to the UI and/or to the GP settings?

3. O&O ShutUp10: I use this program aggressively, with most items switched to “green” (disabled). Under the WU section, the 2 items “Automatic Windows Updates” are not disabled.

But, is the aggressive use of ShutUp10 influencing the pending updates, like “strafing” me for “bad” behavior?

You do not have to reboot between these:
KB4499167 2019-05 Cumulative Update
KB4497932 Update for Adobe Flash Player
.NET Update
If you deal with any organization that ends in gov.uk, you will need KB4505064 (otherwise, you do not need this)

Why do you need to reboot and wait 5 minutes after getting the servicing stack update before installing the cumulative update for that month?

I wanted to share an unusual experience I had with my Windows 7sp1 PC (64 bit) and OneDrive. For weeks it stayed stuck on signing in. When I tried to right-click the cloud notification icon it would just grey out. I checked the status of the icon and it said “OneDrive is Closing”. I tried resetting OneDrive, uninstalling it and reinstalling it. I did the Windows 7 troubleshooter for internet connection problems. I ran and SFC scan and did a CheckDisk. Nothing came up as an error.

When I did reinstall, the app worked fine for the duration I was on the computer. Yet when I signed back on the next day, it was still stuck at signing in.

I uninstalled April and May updates. Tried to reinstall OneDrive again – still no good. I checked the Microsoft support site to see if anyone else had these problems and I found I was not alone. Even with the same time frame of onset of problems. So I tried to reinstall the May updates and then reinstalled OneDrive again, and it started working again. Just wanted to share.

It only takes ONE vulnerable machine on your network to infect everything else behind your firewall. By piggybacking payloads that can target newer OS’s, access to the first machine remotely could trigger a multipronged attack on your servers, other workstations — even if they are patch for this specific vulnerability. (Of course – the same is also true for that one employee that clicks the link in a phishing email . . . .)

1 user thanked author for this post.

In spite of concerns voiced in #1792579 I went ahead and un-paused my W10 1809 and, to my surprise, WU installed all pending updates, KB4494441 included. After a forced reboot I did a 2nd reboot .. per the Patch Lady’s recommendations. It all looked good, except:

The win-version was stuck on April. After a check updates, KB4494441 popped up once more and a 2nd install-reboot was forced. Thereafter the the correct version 17763.503 showed. As far as I can determine, this is not an uncommon thing. What gives?

Possibly unrelated, but, I noticed under “View configured update policies” that I have opted for the Windows Insider Program .. even though I know I have not. What gives?

After a brief online search I found that a 2nd install of KB4494441 is not uncommon. I’m not sure why or what triggers it.

If I hadn’t checked winver I wouldn’t have noticed. If this means KB4494441 didn’t install the 1st time (view updates showed installed) or just that the version wasn’t updated .. dunno. Maybe someone in the know .. knows!

Perhaps the first reboot installs the Servicing Stack (there was a new one for 1809 which has to be installed exclusively) and the second install/reboot actually installs the CU. I’m just guessing MS hasn’t got updates to act right sometimes.

I did a 2nd reboot after the update and before I noticed the incorrect winver. I did one more reboot and the winver was still wrong. Thereafter I checked for updates and KB4494441 was installed a 2nd time. Apparently not the only one experiencing this. But, why, dunno!

I’m being offered KB4494452 for my machine running Windows 10 1709. This is one of the patches listed at the bottom of the Master Patch List under “MDS”; I’m not sure whether it’s being recommended that we install this now or wait.

Also, for 1803 and 1809, this section says “KB Microcode not yet available”; should we be actively on the lookout for the release of similar patches for machines running 1803 and 1809?

(I never did install the microcode patches from last year, as the sense around here was that the risk was illusory and the patches problematic. Not sure to what degree this is a continuation of that same story or something new.)

2 users thanked author for this post.

A week ago, I installed the usual Group B updates for May without problems, and I just found here, reading the previous entries, about KB4494452, a patch that I hadn’t heard of before — or been offered already through Windows Update for consideration. So I looked in the MDS section of the Master Patch List, and all it says there, for Windows 7, is: “Registry AMD / Intel + BIOS”. No mention to the KB in that entry.

Does that mean something like: “check this Registry record, and if it does not show the update has been installed, ask your manufacturer for it?” That would be my best guess, right now.

By the way, I do not want to install this update in the BIOS at this time. But I would like to understand this better.

@PKCano: This is not relevant to the post you made, however I could not locate anything that would address my question.

I installed the May updates when they were available, and had no problems with them. I have now checked for “updates”, and there is nothing showing any June updates. There are only two items, and they are the Windows Malicious Software Removal Tool which I don’t use, and the other one is the Windows Defender update, showing Definition 1.295.207.0 showing a date of June 6, 2019 (which I don’t use either).

Is there any reason that I am not seeing any June updates at all? These were the only two in the Important List, both checked. Nothing in the Optionals (only 2 items) checked.

This is the first time I have ever seen no “new” updates for the current month. If anyone would know a possible reason it could only be you as you are so knowledgeable, and possess an outstanding wealth of expertise. Thank you once again for all of your help. I am Win 7, Home Premium, Group A, and no sophisticated programs. I am baffled by this situation. Once again Thank You, very, very much.

Patch Tuesday is the second Tuesday of the month. June patches aren’t released until June 11th – that’s next Tuesday. And we don’t install them right when they are released either. So, be patient. You haven’t seen them because they aren’t here yet!

@PKCano: Please accept my apology for the question about “June Updates”. I am very embarrassed that I overlooked the “Patch Tuesday”, and bothered you with another question. Thank you for setting me straight on that….. As always, I sincerely appreciate the time you take to help so many members, and the fact that your expertise is admired, and amazing.

Oh really. I installed the May security only u0date for Windows. That took just fine with no issues. Then today I downloaded and installed the May cumulative update for IE11. After installing that, I was immediately presented with corrupted Recycle Bin errors, even though there was nothing in my Recycle Bin for all hard drives.

Woody: If you’re running Windows 7, Vista, or XP — or Server 2003, 2008 or 2008 R2 — you need to get patched now. No, there aren’t any known BlueKeep explo

FYI: Just in case you need a quick & dirty solution to check, if systems are vulnerable, I’ve created a small ‘how to’ that explains how to search the control panel for updates, how to use a small patch program I wrote and how to do a network scan. Maybe it is helpful for some people.

1 user thanked author for this post.

thank you, gborn for the excellent article. i looked at my HKLM\SYSTEM\CurrentControlSet\Control\TerminalServer>fDenyTSConnections key(s) and it is set to 1 (deny). actually on some machines (Win7 Pro) registry search it is in CurrentControlSet 1 and CurrentControlSet 2 (on the whoops “recovered” machine). the RDP in Services is set to run manually and according to Steve Gibson port 3389 is closed off

I wanted to ask about Office Updates on Windows 8.1 with CTR. I haven’t installed any Office updates in 2019. Either by the time the Defcon rating is ok to install monthly updates, or I “catch” the official ok and do my system image (my fault!); quite often the new non-security Office updates for the next month are already out. As the new updates aren’t approved yet; and I can’t pick and choose Office updates with CTR, as I do on my Windows 7 pc… I don’t update Office at all. Are Office updates ever so critical that I can’t wait on them? Is there a way to update Office without using CTR? Thanks.

Windows 8.1|64-bit|Home Ed|Office Home and Student 2013 (standalone)|Current Office version is 15.0.5041.1001.

Office C2R updates are up to Microsoft.
However, there is a Semi-Annual Channel for them that will reduce the frequency so you are not hit with updates monthly (or more frequently). Susan Bradley has talked about it on AskWoody, but you may also find the information somewhere in the program’s settings, or here on the Microsoft website.

1 user thanked author for this post.

Thanks! I have Home and Student 2013 (non-subscription), not Office 365. When I bought it, it didn’t use CTR; but back then, I let things auto-update and CTR installed. Now, I keep updates disabled. The MS Catalog has individual security updates, but says they’re for MSI products only. (I don’t care about “improvements”.)

My apologies! I’d read the semi-annual channel update info, but forgot it as it didn’t directly apply to me. But I see your point. If others only update semi-annually; unless I see something urgent here, I’m ok updating my product a few times a year too.

KB4465065 is an Intel microcode patch. It has been updated and reissued multiple times with the same KB number. What you have is not the Feb version of the patch, but the 6/11 version. Please see the Microsoft Update Catalog for information.

I use these Windows Update settings. So far, I have avoided KB4465065, KB4023057, drivers, forced updates and forced upgrades with the Win10 Pro.

Don’t know how that’s going to work with 1903, considering the ongoing debate about those settings disappearing from the GUI. I upgraded one of my 1809 VMs to 1903 and can verify the deferral settings are no longer in the GUI (disappeared). I blew the 1903 VM away (not going there yet) and restored the 1809.
I’m waiting to see what Microsoft does. Was it unintentional on their part and they will restore the settings? Only time will tell.

Author

Posts

Viewing 30 reply threads

Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

Reply To: MS-DEFCON 4: It’s time to get the May 2019 Windows and Office patches installed

You can use BBCodes to format your content.Your account can't use Advanced BBCodes, they will be stripped before saving.

Plus Membership

Donations from Plus members keep this site going. You can identify the people who support AskWoody by the Plus badge on their avatars.

AskWoody Plus members not only get access to all of the contents of this site -- including Susan Bradley's frequently updated Patch Watch listing -- they also receive weekly AskWoody Plus Newsletters (formerly Windows Secrets Newsletter) and AskWoody Plus Alerts, emails when there are important breaking developments. Click here for details and to sign up.